125 
CLIENT lA 



135 

CLIENT lA 



130 
CLIENT lA 




170 

SERVER A 
(NETWORK) 









WIDGET 
CORPORATION 



180 

SERVER E 
(FINANCE) 



182 

SERVER F 
(PAYROLL) 



177 
SERVER D 



160 

CLIENT ID 



HOTEL 



120 



165 
CLIENT 2D 



172 
SERVER B 



CAR 
RENTAL 



140 
CLIENT IB 



145 
CLIENT 2B 



175 
SERVER C 



AIRLINE 



115 



150 

CLIENT IC 



150 
CLIENT 2C 



FIGURE 1 



210 

SAML REQUEST/ASSERTION 





215 


SOAP 







220 


HTTP 





FIGURE 2A 



HTTP 


250 


SOAP 


255 


SAML 


260 


HEADER 




HEADER 




BODY 





FIGURE 2B 



RECEIVE AN ENTITY IDENTIFIER OF A FIRST ENTITY 
BY A SECOND ENTITY 

310 



RECEIVE ACCOUNT MAPPING OF THE FIRST ENTITY 
BY THE SECOND ENTITY 



320 



STORE ENTITY IDENTIFIER AND ACCOUNT MAPPING OF THE FIRST 
ENTITY IN A PARTNER LIST OF THE SECOND ENTITY 

330 



RECEIVE AN ENTITY IDENTIHER OF THE SECOND ENTIY 
BY THE FIRST ENTITY 



340 



RECEIVE ACCOUNT MAPPING OF THE SECOND ENTITY 
BY THE FIRST ENTITY 



350 



STORE ENTITY IDENTIFIER AND ACCOUNT MAPPING OF THE 
SECOND ENTITY IN A PARTNER LIST OF THE FIRST ENTITY 



360 



FIGURE 3 



i-l 



Pi, 
< 



ACTION 
MAPPER OF 

ATOB 


ACTION 
MAPER OF 

ATOC 


• • • 


SITE 

ATTRIBUTE 
LIST OF A TO B 


SITE 

ATTRIBUTE 
LIST OF A TO C 


• • • 


ATTRIBUTE 
MAPPER OF 
ATOB 


ATTRIBUTE 
MAPPER OF 

ATOC 


• • • 


ACCOUNT 
MAPPER OF 

ATOB 


ACCOUNT 
MAPPER OF 

ATOC 


. . . 


NETWORK 

ADDRESS 

OFB 


NETWORK 

ADDRESS 

OFB 


■ • • 


CERTIFICATE 
OFB 


CERTIFICATE 
OFC 


• • • 


SERVER 
B 


SERVER 
C 


• • • 






g 





o 



FIRST ENTITY 
(SERVER A) 



510 



530 

ADMINISTRATION 
MODULE 





550 


PARTNER LIST 





SECOND ENTITY 
(SERVER B) 



520 



540 




ADMINISTRATION 




MODULE 








560 


PARTNER LIST 



FIGURE 5 



610 

RECEIVE SAML REQUEST CONTAINING AN ENTITY IDENTIFIER 
FROM A SECOND ENTITY BY THE FIRST ENTITY 




r 


LOOKUP ENTITY IDENTIFIER IN PARTNER LIST TO 
OBTAIN AN ACCOUNT MAPPING, ATTRIBUTE MAPPING, SITE 
ATTRIBUTE LIST, ACTION MAPPING AND/OR THE LIKE 


620 




r 


PROCESS SAML REQUEST ACCORDING TO THE ACCOUNT 
MAPPING, ATTRIBUTE MAPPING, SITE ATTRIBUTE LIST, 
ACTION MAPPING AND/OR THE LIKE 


630 


^ 


r 


SEND SAML ASSERTION ACCORDING TO THE ACCOUNT 
MAPPING, ATTRIBUTE MAPPING, SITE ATTRIBUTE LIST, 
ACTION MAPPING AND/OR THE LIKE 


640 



FIGURE 6 



FIRST ENTITY 
(PRESENT ENTITY) 



710 



720 



SESSION 
MODULE 





730 


PARTNER LIST 





SAML ASSERTION "^^^ 
SAML REQUEST 



SECOND ENTITY 
(PARTNER ENTITY) 



740 



750 

SESSION 
MODULE 





760 


PARTNER LIST 





FIGURE 7 



